Sophos XGS End of Life: Models, Dates & Replacements

Sophos XGS End of Life: Models, Dates & Replacements

Posted by Saif Khan on 2026 Sep 9th

Which Sophos XGS models are end of life, and what replaces them?

All Sophos XGS Gen 1 desktop appliances are end of sale: the XGS 87, 107, 116, 126, and 136, including every w (wireless) variant. They stopped being sold between January and April 2025, the post-sale support phase started September 30, 2025, and full end of life is September 30, 2030. The last date you can renew a subscription is September 30, 2029. Each model has a direct Gen 2 replacement: 87 to 88, 107 to 108, 116 to 118, 126 to 128, and 136 to 138. Separately, the older XG Series reached end of life on March 31, 2025 and is no longer receiving security updates at all.

The dates that matter

Sophos gave every Gen 1 desktop model a single shared end-of-life date, which makes planning simpler than it usually is.

Milestone Date What it means for you
End of sale Jan to Apr 2025 Passed. You can no longer buy these models new.
Post-sale support phase began September 30, 2025 Support continues, but the clock is running.
Last renewal date September 30, 2029 The final date you can buy a subscription. No term may extend past the EOL date.
End of life September 30, 2030 No further updates, patches, or support. The firewall keeps running but stops being protected.

Every affected model and its replacement

Find your model in the left column. The Gen 2 successor is a direct like-for-like upgrade with more throughput and, on most models, considerably more TLS inspection capacity.

Your Gen 1 model End of sale Gen 2 replacement Price with 1-yr Xstream
XGS 87 January 31, 2025 XGS 88 $1,219
XGS 87w April 14, 2025 XGS 88w $1,358
XGS 107 March 1, 2025 XGS 108 $1,625
XGS 107w April 14, 2025 XGS 108w $1,784
XGS 116 April 14, 2025 XGS 118 $2,245
XGS 116w April 14, 2025 XGS 118w $2,404
XGS 126 April 14, 2025 XGS 128 $3,027
XGS 126w April 14, 2025 XGS 128w $3,424
XGS 136 April 14, 2025 XGS 138 $4,187
XGS 136w April 14, 2025 XGS 128w, or XGS 138 with an AP6 access point $3,424

Prices are USD for the appliance bundled with a 1-year Xstream Protection subscription, current at time of writing. Longer terms lower the effective monthly cost, and monthly licensing is available. One note on the 136w: there is no Gen 2 138w. If you need the wireless built in, the 128w is the direct swap. If you need the 138 performance, pair a non-wireless 138 with a Sophos AP6 access point.

What you actually get by upgrading

This is not a like-for-like refresh where you pay for the same thing again. The Gen 2 desktop models, released October 2024, are a real step up. Comparing the two most common upgrade paths:

Metric XGS 126 (Gen 1) XGS 128 (Gen 2)
Firewall throughput Lower 19.1 Gbps
Threat protection Lower 4.0 Gbps
TLS inspection Lower 1.45 Gbps
Concurrent connections Lower 6 million
Expected lifespan Ending 2030 No EOL declared

The Gen 2 desktop range carries a five-year minimum lifespan from its own end-of-sale date, which has not been announced. In practice that points to a longer runway than the Gen 1 models had.

The older XG Series is a more urgent problem

If you are still running an XG Series appliance rather than an XGS, the situation is different and more serious. XG hardware reached end of life on March 31, 2025. That date has passed. Those appliances no longer receive security updates, patches, or support.

  • The last supported software for XG hardware was SFOS v20. Version 21 and later do not run on it.
  • The IPS engine stops getting new patterns after EOL, so protection degrades with every new threat that emerges.
  • MSP Flex licensing support for XG ends September 30, 2026.
  • The usual migration is to the equivalent XGS model, for example XG 210 to XGS 2100.

If you are on XG hardware today, you are running a firewall that stopped receiving threat intelligence over a year ago. That is the one case on this page where we would say move now rather than plan ahead.

SG Series appliances

Sophos SG Series hardware reaches end of support on June 30, 2026. If you have an SG appliance, note that moving to XGS is not a configuration export and import: SG and XGS run different operating systems, so it is a rebuild rather than a migration. Budget time for it.

What to do, depending on where you are

  • On XG or SG hardware: act now. XG is already past EOL and unprotected against new threats; SG support ends June 2026.
  • On XGS Gen 1 (87, 107, 116, 126, 136): you have until September 2030, but plan the refresh around your next renewal rather than waiting. Buying a 5-year subscription in 2029 is not possible, since no term can extend past the EOL date.
  • On XGS Gen 2 (88, 108, 118, 128, 138): nothing to do. No end-of-sale has been announced for these models.

Frequently asked questions

Is the Sophos XGS 136 end of life?

The XGS 136 reached end of sale on April 14, 2025 and reaches end of life on September 30, 2030. It still works and is still supported until then, but you can no longer buy one new. The replacement is the XGS 138.

Is the Sophos XGS 126 end of life?

The XGS 126 reached end of sale on April 14, 2025, with end of life on September 30, 2030. The direct replacement is the XGS 128, or the XGS 128w if you need built-in wireless.

When is the Sophos XGS 116 end of life?

End of sale was April 14, 2025 and end of life is September 30, 2030. The replacement is the XGS 118, which offers 15.5 Gbps firewall throughput and 1.1 Gbps of TLS inspection.

When is the Sophos XGS 107 end of life?

The XGS 107 reached end of sale on March 1, 2025, with end of life on September 30, 2030. The replacement is the XGS 108.

Is the Sophos XG Series end of life?

Yes. XG Series hardware reached end of life on March 31, 2025. It no longer receives security updates, patches, or support, and the last software version that supported it was SFOS v20. Migrate to the equivalent XGS model.

Can I still renew my XGS Gen 1 subscription?

Yes, until September 30, 2029. No subscription term can extend beyond the September 30, 2030 end-of-life date, so the available term length shortens as that date approaches.

Will my firewall stop working at end of life?

No, the hardware keeps running. What stops is protection: no new threat intelligence, no patches, no support. The IPS engine holds its last downloaded patterns, so the firewall grows less effective against new threats every month.

What is the difference between end of sale and end of life?

End of sale means you can no longer buy the product new. End of life means Sophos stops supporting it entirely. Between the two dates the product is still supported, which is the window you have to plan a refresh.

Plan your refresh with Nuformat

Nuformat is a Sophos partner serving Canada and the United States. Tell us which model you have and when your subscription expires, and we will confirm the right replacement, quote it outright or on monthly terms, and time it so you do not pay twice. Contact Nuformat, or browse Sophos XGS firewalls.

Sources

  • Sophos partner news: End-of-Sale Announcement, Sophos XGS Gen.1 Desktop Appliances (sophos.com)
  • Sophos support: Retirement calendar for Sophos SG UTM, Sophos Firewall, Sophos Switch, Wireless and RED (support.sophos.com)
  • Sophos community: Lifecycle News, Sophos XG Series Hardware and SFOS v19.0 EOL (community.sophos.com)